GCVE-110-NCSC-2025-39

Advisory PublishedCVSS 5.3/10

Vulnetix · Advisory published February 4, 2025

Google heeft kwetsbaarheden verholpen in Android. In deze update zijn ook updates meegenomen voor closed-source componenten van Qualcomm, Imagination Technologies, Unisoc en MediaTek. Samsung heeft kwetsbaarheden in Samsung Mobile verholpen die relevant zijn voor Samsung mobile devices.

Download JSON Open in Console

Weaknesses (CWE)

CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-123Write-what-where ConditionCWE-787Out-of-bounds WriteCWE-126Buffer Over-readCWE-20Improper Input ValidationCWE-280Improper Handling of Insufficient Permissions or PrivilegesCWE-129Improper Validation of Array IndexCWE-416Use After FreeCWE-823Use of Out-of-range Pointer Offset

Risk Scores

CVSS 3.1

5.3/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions	Platforms
google	android	—	—
samsung_mobile	samsung_mobile_devices	—	—

References

advisory

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON